Again and again, we receive messages that contain stuff like <a href=3d"http://advinc-ma=2enetfirms=2ecom/"> instead of <a href="http://advinc-ma.netfirms.com/">
That prevents uri / body rules like e.g. /netfirms\.com/ and URIBL rules from being triggered. I wonder if there is some "function" to automatically "de-code" such items instead of having to use stuff like /netfirms(?:\.|=2e)com/ and how i could use it with SA. regards, wolfgang